Hi all,

My RedHat box could not boot into SERVICE now. It's a RedHat 7.2 PC with "iptables POSTROUTING nat" enabled. I took a look at /var/log/messages and found thousands of strange lines in it, as shown following.
--------------------------------------------------------------
Apr 15 19:44:27 svr1 kernel: ASSERT ip_conntrack_core.c:94 &ip_conntrack_lock readlocked
Apr 15 19:44:27 svr1 kernel: ASSERT ip_conntrack_core.c:1063 &ip_conntrack_lock not readlocked
Apr 15 19:44:27 svr1 kernel: ASSERT: ip_nat_core.c:839 &ip_conntrack_lock not readlocked
Apr 15 19:44:27 svr1 kernel: ASSERT ip_conntrack_core.c:94 &ip_conntrack_lock readlocked
Apr 15 19:44:27 svr1 kernel: ASSERT: ip_nat_core.c:839 &ip_conntrack_lock not readlocked
--------------------------------------------------------------
I don't know what the matter is with iptables or kernel. I could not find any useful help in the manual.
Please give me some suggestion. Any help will be appreciated.

zuohong

Looks like kernel/netfilter problem. Which kernel version are you running? The one that came with RH 7.2 or you have compiled/downloaded a newer one?

Hi,

It's 2.4.19kernel+RedHat 7.2.
A friend in USENET told me this link: http://lists.netfilter.org/pipermail...er/009517.html
But according to my knowledge, I could not understand the solution mentioned in article. Please help me out.

zuohong

Well according to that mail it's harmless to get those messages. And the patch which was included only stops it from printing the asserts. But you said it's not booting into SERVICE. I don't know what you mean by that but most likely it's something else that's causing problems.
Are there any other suspicious messages when you boot the machine? What exactly is not working?

Hi,

Acutally this RedHat box had been reinstalled... for the reason that it could not boot up. I remember RedHat booting stopped when hardware loading finished. Usually after hardware loading, Linux services should startup one by one.
I mounted the original /var/ partition to a new folder in new system, so that I could check the log files.

Zuohong